Watchet 隐私政策

生效日期：2026 年 11 月 4 日

Watchet（包名 com.yglllzcw.watchet）由成都知源创芯科技有限公司（Chengdu Zhiyuan Chuangxin Technology Co., Ltd，以下简称“我们”）开发和运营。本政策说明 Watchet 会处理哪些数据、为什么处理以及你拥有的权利。

1. 只保存在你手机上的数据

以下数据只存储在你的设备上，不会上传给我们：

• 你添加的服务器信息（主机名、端口、用户名、标签等）；
• SSH 私钥和密码。私钥由 Android 系统的安全硬件（Android Keystore）加密保存，不会离开这台手机；
• 终端内容、输入历史、智能体会话内容和应用设置。

Watchet 通过 SSH 直接连接你自己指定的服务器，终端数据不经过我们的服务器。应用关闭了 Android 系统备份，以上数据不会进入云备份。

2. 购买 Pro 时处理的数据

付款完全由 Google Play 处理，我们拿不到你的银行卡、支付账号或 Google 账号信息。为了确认购买有效，并限制一份购买最多在 3 台设备上使用，应用会把以下信息发送到我们的授权服务器：

• Google Play 购买凭证（purchase token）和商品 ID；
• 设备标识：Android ID 经 SHA-256 哈希后的值，原始 ID 不会离开手机；
• 设备型号名称（例如 “Google Pixel 9”），方便你在设备列表里认出每台设备；
• 设备的激活时间和最近一次校验时间。

授权服务器位于美国。服务器会用这份购买凭证向 Google Play 核验购买状态。你的 IP 地址只在内存中短暂使用，用于防滥用的限流，大约 1 分钟后丢弃，不写入存储。以上授权数据会一直保留，用于执行设备数量限制，直到你要求删除（见第 7 条）。你可以随时在应用里移除某台设备。

2a. 参加内测时处理的数据

如果你受邀参加 Watchet 内测，激活内测版时应用会把以下信息发送到授权服务器：你的邀请码、你填写的姓名（作为《Watchet 内测保密协议》的签名）、经哈希处理的设备标识、设备型号、安装包签名指纹，以及你同意的协议版本和时间。我们用这些信息核验内测资格、限制设备数量、保存协议签署凭证，并在内测版或邀请码外泄时追溯来源。你的姓名会以水印形式显示在内测版界面上。邀请码在服务器上只以哈希形式保存。上述数据在内测期间及之后为保存签约凭证所必需的期限内保留，你可以通过第 7 条的方式联系我们删除。

3. 麦克风（语音输入）

只有当你主动点击语音输入按钮时，应用才会使用麦克风。语音由你手机上的系统语音识别服务（例如 Google 语音识别）转成文字，相关处理适用该服务提供方的隐私政策。Watchet 不录音，也不会把音频发送给我们。

4. 通知与后台运行

Watchet 通过通知提醒你处理服务器上智能体的请求，并用前台服务保持 SSH 连接。这些功能只与你自己的服务器通信。

5. 我们不做的事

• 不含广告，不集成任何第三方统计、追踪或崩溃上报 SDK；
• 不出售、不出租你的任何数据；
• 除第 2 条所述向 Google Play 核验购买外，不与任何第三方共享数据。

6. 数据安全

应用与授权服务器之间的通信全程使用 HTTPS 加密。授权结果由服务器签名，应用在本地验签。

7. 你的权利与数据删除

卸载应用即可删除第 1 条中所有本地数据。如需删除第 2 条中的授权记录，或者想查询、更正我们保存的数据，请发邮件到下方联系邮箱，我们会在 15 个工作日内处理。

8. 儿童

Watchet 是面向开发者的工具，不面向 13 岁以下儿童，我们也不会有意收集儿童的个人信息。

9. 政策更新

本政策如有变更，会在本页面更新并修改生效日期。重大变更会在应用内提示。

10. 联系我们

成都知源创芯科技有限公司
邮箱：support@yglllzcw.com

Watchet Privacy Policy

Effective date: November 4, 2026

Watchet (package com.yglllzcw.watchet) is developed and operated by Chengdu Zhiyuan Chuangxin Technology Co., Ltd (“we”). This policy explains what data Watchet handles, why, and your rights.

1. Data that stays on your device

The following is stored only on your device and is never sent to us:

• The servers you add (hostnames, ports, usernames, labels);
• SSH private keys and passwords. Private keys are encrypted by the Android Keystore security hardware and never leave the device;
• Terminal content, input history, agent conversations and app settings.

Watchet connects directly to the servers you choose over SSH; terminal traffic does not pass through our servers. Android backup is disabled for the app, so this data is not included in cloud backups.

2. Data processed when you buy Pro

Payments are handled entirely by Google Play. We never receive your card, payment account or Google account details. To verify a purchase and limit it to 3 devices, the app sends our license server:

• The Google Play purchase token and product ID;
• A device identifier: a SHA-256 hash of the Android ID (the raw ID never leaves the device);
• The device model name (e.g. “Google Pixel 9”) so you can recognise your devices in the device list;
• When each device was activated and last checked in.

The license server is located in the United States. It checks the purchase token with Google Play. Your IP address is used only in memory for abuse rate limiting and discarded after about one minute; it is not stored. License data is kept to enforce the device limit until you ask us to delete it (see section 7). You can remove a device from within the app at any time.

2a. Data processed if you join the beta

If you are invited to the Watchet beta, activating the beta build sends our license server your invite code, the name you enter (as your signature on the Watchet Beta Confidentiality Agreement), a hashed device identifier, your device model, the signing fingerprint of the installation package, and the agreement version and time you accepted. We use this to check beta eligibility, limit the number of devices, keep a record of the signed agreement, and trace the source if the beta build or an invite code leaks. Your name is shown as a watermark in the beta app. Invite codes are stored only as hashes. This data is kept for the beta and for as long as needed afterwards to keep the signed agreement on record; you can ask us to delete it as described in section 7.

3. Microphone (voice input)

The microphone is used only when you tap the voice input button. Speech is converted to text by your device’s system speech recognition service (e.g. Google), whose privacy policy applies to that processing. Watchet does not record audio or send it to us.

4. Notifications and background operation

Watchet uses notifications to alert you to agent requests on your servers, and a foreground service to keep SSH connections alive. These features talk only to your own servers.

5. What we don’t do

• No ads, and no third-party analytics, tracking or crash-reporting SDKs;
• We do not sell or rent any of your data;
• We share no data with third parties, apart from verifying purchases with Google Play as described in section 2.

6. Security

All communication between the app and the license server is encrypted with HTTPS. License grants are signed by the server and verified on the device.

7. Your rights and data deletion

Uninstalling the app deletes all local data described in section 1. To delete the license records in section 2, or to access or correct data we hold, email us at the address below; we will respond within 15 business days.

8. Children

Watchet is a developer tool not directed at children under 13, and we do not knowingly collect personal information from children.

9. Changes

We will post any changes on this page and update the effective date. Material changes will be announced in the app.

10. Contact

Chengdu Zhiyuan Chuangxin Technology Co., Ltd
Email: support@yglllzcw.com